You're exactly right! Building a slow web app is only one npm install away.

It takes someone who really cares about performance and monitors it to make a fast web app and to keep it that way. Unfortunately it's still too easy to accidentally make it slow.